This vulnerability allows remote attackers to execute arbitrary code on affected installations of Exchange Server. Authentication is required to exploit this vulnerability. Additionally, the target user must have the “Data…

Microsoft SQL Server Reporting Services 2016 suffers from a remote code execution vulnerability.

This exploit leverages a file write vulnerability in the print spooler service which will restart if stopped. Because the service cannot be stopped long enough to remove the dll, there…

Proof of concept exploit for the Windows Zerologon vulnerability as noted in CVE-2020-1472. By default, it changes the password of the domain controller account.

Piwigo version 2.10.1 suffers from a cross site scripting vulnerability.

Acronis Cyber Backup version 12.5 Build 16341 suffers from a server-side request forgery vulnerability.

1CRM versions 8.6.7 and below suffer from an insecure direct object reference vulnerability.

This Metasploit module exploits a command injection vulnerability in Mida Solutions eFramework version 2.9.0 and prior. The ajaxreq.php file allows unauthenticated users to inject arbitrary commands in the PARAM parameter…